403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/bg-BG/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.26060.3008-0/bg-BG/DefenderDiag.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�;=߉ZS��ZS��ZS�Ӭ��ZS��Q��ZS�Rich�ZS�PEd�.��}�" ,*�P��` h&,�%8.rdata�@@.rsrc0 (@@.��}
lPP.��}$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg .rsrc$01(��.rsrc$02 ՠ(ȇ�x��'����/u��H�k���P^.��}��0�H�������%�������(�?@�EX�Fp�G��H��L��R��S��~���0��H��`��x�9��x�������������� ��8��P��h����������������3��4�r(�@�X�p�������� 0@P`p�������� 0@P`p��������'���(��t*��l,��/���0R��1���2��\3��6V�`:(��<���@��<D���F���X��`i���n^�Du���{����P��:�L�����H�@��
��&�8�>�x���8�����:��t����\N��	��(,��)n�X1��06���>p�8B0�MUI�����}J�`_����Ne�ֶ��n���������MUIbg-BGBC:5 A0 >B:@8B8 ?@>1;5<8.!O<0 =0;8G=0 ?>4@>1=0 8=D>@<0F8O.>44J@60I8 40==8:82> =0 2J7459AB2850<8@0=5	@5?>@J:0	@5?@0B:81@0B=0 2@J7:0	0B53>@8O=0;87@5H:0@54C?@5645=85=D>@<0B825=@52:;NG20=5 =0 =02830F8OB0PA+BG5B 70 4803=>AB8G=8 ?@>7@5=8O =0 Defender1I ?@53;54@56>28 :><C=8:0F88
=54@O20=5$:;NG20=5 =0 ?>B@518B5;8 2 A8AB5<0B04@025:BC0;=>@>1;5<8 A ?@>872>48B5;=>ABB0@>1;5<8 A :>=D83C@0F8OB0CFA><>IASRO<05 5 :>=D83C@8@0=>%1 G0A0	A5:8 45=545;O
>=545;=8:B>@=8:!@O40	'5B2J@BJ:5BJ:!J1>B08:>30"5AB>25 70 <@56>28 :><C=8:0F88"5AB>25 70 @07?>;030=5 =0 MDE'"5AB>25 70 2:;NG20=5 =0 MDE 2 A8AB5<0B0*"5AB>25 70 AJAB>O=85B> =0 DC=:F88B5 =0 MDE:BC0;=8 B5AB>25 =0 MDE"5AB>25 70 ?@>872>48B5;=>AB"5AB>25 =0 :>=D83C@0F8OB0,"5AB>25 70 CFA (:>=B@>;8@0= 4>ABJ? 4> ?0?:8)PA1"5AB>25 ASR (=0<0;O20=5 =0 ?>2J@E=>ABB0 =0 0B0:0)
570:B828@0=0	;>:8@0=5@>25@:05 5 =0;8G=0%1 CA;C30B0 =5 5 =0;8G=05 5 =0;8G=>58725AB=> AJAB>O=85@>F5A$09;V�����\��@@M� �[�
`g�Yg  �K���!`c�@ ��?��F#�Fg+8i� �����!
 ��] �� �V��9:;���*��e`�_cm�g�9k�</_�J!.!"OWm�<��UU��� �>�7`6^ �Ua��� �>�5V �B�A\ ��T��][�� ���+c �����e S�98/IPA
0:;NG5=8O
0:;NG5=8OL)@0:=5B5 2J@EC 2@J7:0B0 "=0;87", 70 40 2848B5 ?>4@>1=>AB8 70 :>=AB0B0F88B5.=D>@<0F8O 70 <0H8=0B0=D>@<0F8O 70 <0H8=0B0VMNameVMSize
VMLocation =0 01>=0<5=B
@C?0 @5AC@A8VmId	OSVersion	@>9 O4@0@>9 ;>38G5A:8 ?@>F5A>@8
8H:8 =0 O4@>$878G5A:0 ?0<5B5AB>?>;>65=85 =0 PageFile,"5:CI> 87?>;720=5 =0 D09; 70 28@BC0;=0 ?0<5B507>2 @07<5@ =0 @07?@545;5=8O D09; 70 28@BC0;=0 ?0<5B,8:>2> 87?>;720=5 =0 D09; 70 28@BC0;=0 ?0<5B!2J@70= A 4><59=@8AJ548=5= :J< Azure ADPA!2J@70= A @01>B=> <OAB> =0 CAB@>9AB2> 2 Azure AD!JAB>O=85 =0 70?8A20=5"@E8B5:BC@0 =0 >?5@0F8>==0 A8AB5<0@5<5 70 70@5640=5 =0 A8AB5<0B0"1I>A8AB5<5= WinHTTP ?@>:A8 AJ@2J@(#AB@>9AB2>B> 5 70?8A0=> 2 Azure AD 8 MEM7#AB@>9AB2>B> =5 5 70?8A0=> 8 =8:>30 =5 5 18;> 70?8A20=>)#AB@>9AB2>B> A5 C?@02;O20 >B 035=B =0 MDM*#AB@>9AB2>B> A5 C?@02;O20 >B 035=B =0 SCCM6@>1;5< A :>=D83C@0F8OB0 =0 Microsoft Endpoint Manager1I0 3@5H:0@>1;5< AJA A2J@720=5B>)#AB@>9AB2>B> 5 70?8A0=> 8 A530 5 >B?8A0=>#AB@>9AB2>B> >G0:20 >B?8A20=5 5CA?5H=> ?@8A2>O20=5 =0 ?@028;0PA5CA?5H5= >BG5B 70 ?@028;0'1I0 3@5H:0 ?@8 E81@84=> ?@8AJ548=O20=55AJ>B25BAB285 =0 :;85=B0.%81@84=0 3@5H:0   B>G:0 70 A2J@720=5 =0 CA;C30@5H:0 2 A5@B8D8:0B&5?@028;=0 :>=D83C@0F8O =0 AAD Connect@5H:0 2 DNS(@>1;5< AJA A8=E@>=870F8OB0 =0 G0A>2=8:0MDE 8 ConfigMgrEDR=D>@<0F8O 70 Sense5@A8O =0 Sense!JAB>O=85 =0 CA;C30B0 Sense =0 >@30=870F8OB0 =0 CAB@>9AB2>.GUID =0 AJAB>O=85B> 70 70I8B0 A@5IC ?>4?@02O=5%!JAB>O=85 =0 CA;C30B0 DiagTrack (UTC)N 07?>;>65=0 5 2J7<>6=>ABB0 70 70I8B0 A@5IC =5?@02><5@=0 A<O=0 =0 A0<>;8G=>ABB0!5@A8O =0 :>=D83C@0F8OB0 =0 Sense =0 MachineAuthStartType =0 CA;C30B0 Sense25AB>?>;>65=85 =0 F5=BJ@0 70 40==8 =0 CAB@>9AB2>B>5#AB@>9AB2>B> 5 @538AB@8@0=> G@57 >?@>AB5=0 A2J@70=>AB7!B0@B>2 B8? =0 0A8AB5=B 70 2;870=5 2 0:0C=B 2 MicrosoftPADefender AV=D>@<0F8O 70 Defender AV!!JAB>O=85 =0 CA;C30B0 Defender AV!5@A8O =0 ?;0BD>@<0B0 Defender AVW5@A8O =0 Defender ?@>3@0<0 A@5IC 7;>=0<5@5= A>DBC5@ 70 0=0;8B8G=0 8=D>@<0F8O 70 70I8B0+5@A8O =0 0=B828@CA=8O 42830B5; =0 DefenderAV @568< =0 Defender&>=D83C@0F8O =0 Defender AV SSLOptionsD>=D83C@0F8O =0 ?@>:A8 70 Defender ?@>3@0<0 A@5IC 7;>=0<5@5= A>DBC5@-!B0BCA =0 CA;C30B0 &5=BJ@ 70 70I8B0 2 Windows7!JAB>O=85 =0 CA;C30B0 70 87?@02=>AB =0 0I8B0 2 Windows2!B0BCA =0 CA;C30B0 70 <@56>20 ?@>25@:0 =0 Defender&!B0BCA =0 >A=>2=0B0 CA;C30 =0 Defender)Defender 5 70I8B5= >B 7;>=0<5@5=0 ?@><O=057B>G=8: =0 70I8B0 >B 7;>=0<5@5=0 ?@><O=0 =0 Defender77:;NG5=8O 70 70I8B0 >B 7;>=0<5@5=0 ?@><O=0 =0 DefenderSmartLocker Mode =B8H?8>=A:8 A>DBC5@ =0 Defender# 568< =0 <@56>20 70I8B0 =0 Defender@53;5409B5 <@56>20B0 A8 :>=D83C@0F8O 8 A5 C25@5B5, G5 =5>1E>48<8B5 URL 04@5A8 =5 A0 1;>:8@0=8. 
0 ?>25G5 8=D>@<0F8O 286B5: %1URL 04@5A8 =0 CA;C38�"5AB20=5B> =0 2@J7:0B0 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (CnC) 702J@H8 CA?5H=>. %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (CnC) 5 =5CA?5H=>. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (CnC) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (Cyber) 702J@H8 CA?5H=>. %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (Cyber) 5 =5CA?5H=>. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (:815@A83C@=>AB) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (AutoIR) 702J@H8 CA?5H=>. %1 A @57C;B0B %2�5CA?5H=> B5AB20=5 =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (AutoIR). 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (AutoIR) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (SampleUpload) 702J@H8 CA?5H=>. %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (SampleUpload) 5 =5CA?5H=>. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (SampleUpload) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (MdeConfigMgr) 702J@H8 CA?5H=>. %1 A @57C;B0B %2PA�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (MdeConfigMgr) 5 =5CA?5H=>. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (MdeConfigMgr) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (OneDs) 702J@H8 CA?5H=>. %1 A @57C;B0B %2�"5AB20=5B> =0 2@J7:0B0 A URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (OneDs) 5 =5CA?5H=>. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (OneDs) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2X@>25@:0B0 =0 A5@B8D8:0B0 70 CA;C30B0 Defender 70 :@09=0 B>G:0 2 >1;0:0 702J@H8 CA?5H=>.3@>25@:0 =0 >B<O=0B0 =0 A5@B8D8:0B0 =5 5 872J@H5=0.Q!2J@720=5B> A >1;0:0 <>65 40 1J45 =0@CH5=> ?>@048 =5CA?5H=> >B<O=0 =0 A5@B8D8:0B.�#25@5B5 A5, G5 A;54=8B5 URL 04@5A8 =5 A0 1;>:8@0=8: %1 8 %2. 0 ?>25G5 8=D>@<0F8O 286B5 %3. 0 ?>4@>1=0 8=D>@<0F8O 70 3@5H:0B0 ?@53;5409B5 %4.["5AB20=5B> =0 2@J7:0B0 A >1;0G=0B0 CA;C30 =0 Microsoft Defender Antivirus ?@8:;NG8 CA?5H=>.X"5AB20=5B> =0 2@J7:0B0 A >1;0G=0B0 CA;C30 =0 Microsoft Defender Antivirus =5 15 CA?5H=>.O:> Microsoft Defender Antivirus 5 20H5B> >A=>2=> 0=B828@CA=> @5H5=85 8;8 AB5 871@0;8 40 0:B828@0B5 @568<0 =0 1;>:8@0=5 =0 EDR, <>;O, C25@5B5 A5, G5 2@J7:8B5 :J< AV >1;0G=8B5 URL 04@5A8 =5 A0 1;>:8@0=8. 0 ?>25G5 8=D>@<0F8O 286B5: https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus4"5:CI0B0 <@56>20 2@J7:0 =5 5 A 87<5@5=> ?>B@51;5=85.4"5:CI0B0 <@56>20 2@J7:0 5 A 87<5@5=> ?>B@51;5=85. %1�@568B5 A 87<5@5=> ?>B@51;5=85 <>30B 40 >3@0=8G0B DC=:F8>=0;=>ABB0 2 :><C=8:0F8OB0 =0 Defender MAPS, =0?@8<5@ =5 A5 87?@0I0B 70O2:8 70 A?5H=8 ?>4?8A8 (=5>1E>48<8 70 ?5@A>=0;878@0=8 8=48:0B>@8 2 4>?J;=5=85 :J< A?5H=8B5 ?>4?8A8).01;86020 ;8<8B =0 40==8: %1PAOverDataLimit: %1 >C<8=3: %1NetworkCostType: %1�"5AB20=5B> =0 2@J7:0B0 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (:>=D83C@0F8O =0 ECS) 702J@H8 CA?5H=>. %1 A @57C;B0B %2("5AB>20B0 2@J7:0 A CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (:>=D83C@0F8O =0 ECS) 2J@=0 HTTP 502 =5?@028;5= H;N7. ">20 5 8725AB5= ?5@8>48G5= ?@>1;5< A H;N70 70 ?@8;>65=8O =0 Azure 8 <>65 40 A5 @07@5H8 A0<>AB>OB5;=>. ?8B09B5 >B=>2> ?@>25@:0B0, 0:> B>20 ?@>4J;6020. %1 A @57C;B0B %2�A8G:8 B5AB>28 2@J7:8 :J< URL 04@5A8B5 =0 CA;C30B0 2 >1;0:0 =0 Microsoft Defender 70 :@09=0 B>G:0 (:>=D83C@0F8O =0 ECS) A0 =5CA?5H=8. 
"5ABJB 5 =5CA?5H5= 70 A;54=8O URL 04@5A: %1 A @57C;B0B %2PA�:> 2J7=0<5@O20B5 40 @07@5H8B5 C?@02;5=85B> =0 :>=D83C@0F8OB0 70 70I8B0 =0 MDE, 286B5 A;54=0B0 4>:C<5=B0F8O 70 A?8AJ:0 A 878A:20=8O.>44J@60=8 ?;0BD>@<8p#AB@>9AB2>B> =O<0 <8=8<0;=>B> =82> =0 :>@5:F8O 70 2=54@O20=5 =0 C?@02;5=85B> =0 :>=D83C@0F8OB0 =0 MDE 70I8B0: %1�#AB@>9AB2>B> 8<0 8=AB0;8@0=0 @>;O =0 CA;C38 70 8<5=0 =0 Active Directory. >44@J6:0B0 70 4><59=>28 :>=B@>;5@8 2 <><5=B0 5 2 ?@5420@8B5;5= ?@53;54 8 878A:20 4>?J;=8B5;=0 :>=D83C@0F8O.�:> 2J7=0<5@O20B5 40 0:B828@0B5 C?@02;5=85B> =0 :>=D83C@0F8OB0 70 70I8B0 =0 MDE 70 4><59=>28 :>=B@>;5@8, <>;O, 286B5 A;54=0B0 4>:C<5=B0F8O.K7?>;720=5 =0 C?@02;5=85B> =0 =0AB@>9:8B5 70 70I8B0 =0 4><59=>28 :>=B@>;5@8�#AB@>9AB2>B> @01>B8 A 32-18B>20 >?5@0F8>==0 A8AB5<0, :>OB> =5 A5 ?>44J@60 70 2=54@O20=5 =0 C?@02;5=85B> =0 :>=D83C@0F8OB0 70 70I8B0 =0 MDE.PAq1J@=5B5 2=8<0=85, G5 :><?8;0F8OB0 =0 ! =0 CAB@>9AB2>B> =5 A5 ?>44J@60 >B MDE 8 =5 <>65 40 1J45 @538AB@8@0=0: %1>86B5 B078 AB0B8O 70 A?8AJ: =0 ?>44J@60=8B5 25@A88 =0 Windows.C%1 =0 B>20 CAB@>9AB2> =5 A5 87?J;=O20 =0 >G0:20=>B> =82> =0 70I8B0.�0 ?>25G5 8=D>@<0F8O >B=>A=> PPL 70I8B0B0 8 70I> 5 :@8B8G=0, 286B5 B078 4>:C<5=B0F8O. !2J@65B5 A5 A ?>44@J6:0B0 =0 Microsoft, 0:> ?@>1;5<JB ?@>4J;6020.PPL�<09B5 ?@54284, G5 8740=85B> =0 AJ@2J@0 A0<> 70 Hyper-V, 8=AB0;8@0=> =0 B>20 CAB@>9AB2>, =5 A5 ?>44J@60 >B MDE 8 =5 <>65 40 1J45 @538AB@8@0=>: %1Y>;O, 286B5 ?>44J@60=0B0 4>:C<5=B0F8O =0 MDE 70 A?8AJ: A ?>44J@60=8B5 8740=8O =0 AJ@2J@0.>44J@60=8 25@A88 =0 Windows#A;C30 MDE Sense#A;C30 MDE AV Windefend#A;C30  0I8B0 2 Windows Windows SecurityHealth Service&#A;C30 MDE Network Protection WdnisSvc!A=>2=0 CA;C30 =0 Defender =0 MDEPA$0 ?>25G5 8=D>@<0F8O 286B5 AB0B8OB0.�<09B5 ?@54284, G5 B078 <0H8=0 @01>B8 A >AB0@O;0 25@A8O =0 ?;0BD>@<0B0 Defender. 5@A88B5 =0 ?;0BD>@<0B0, ?>-AB0@8 >B N-2, 25G5 =O<0 40 A5 ?>44J@60B.'Microsoft Defender AntiMalware PlatformF<09B5 ?@54284, G5 B078 <0H8=0 A5 87?J;=O20 A >AB0@O;0 25@A8O =0 O4@>B> =0 Defender Antivirus. >44@J6:0B0 70 ?@548H=8B5 425 25@A88 A;54 874020=5B> =0 =>20 25@A8O =0 ?0:5B0 A5 A25640 A0<> 4> B5E=8G5A:0 ?>44@J6:0. 5@A88, ?>-AB0@8 >B BOE, A0 871@>5=8 2 B>78 @0745; 8 A5 ?@54>AB02OB A0<> 70 B5E=8G5A:0 ?>44@J6:0 ?@8 =043@0640=5.#Microsoft Defender Antivirus engine�<09B5 ?@54284, G5 B078 <0H8=0 @01>B8 A >AB0@O;0 25@A8O =0 0=0;8B8G=0B0 8=D>@<0F8O 70 70I8B0. @5?>@JG8B5;=> 5 40 ?@8;>68B5 =09-=>20B0 25@A8O =0 0=0;8B8G=0B0 8=D>@<0F8O 70 70I8B0, 70 40 >A83C@8B5 >?B8<0;=0 70I8B0 8 AJ2<5AB8<>AB.9:BC0;870F88 =0 0=B828@CA=0B0 ?@>3@0<0 Microsoft DefenderP=48:0B>@   =01;N4020 A5 28A>:0 C?>B@510 =0 ?@>F5A>@0 ?>@048 B@0D8: =0 Sense NDRH?8B09B5 40 ?@8;>68B5 87:;NG5=8OB0 =0 Sense EDR :J< A;54=8B5 ?@>F5A8: %18A>:> 87?>;720=5 =0 ?@>F5A>@0N;0BD>@<0B0 MDE 5 87?8B0;0 28A>:0 C?>B@510 =0 ?0<5BB0 A B5:CI8B5 25@A88 =0 MDE8A>:> 87?>;720=5 =0 ?0<5BB0)5CA?5H=8 0:BC0;870F88 =0 ?;0BD>@<0B0 MDE'5CA?5H=8 0:BC0;870F88 =0 MDE 42830B5;O*5CA?5H=8 0:BC0;870F88 =0 ?>4?8A8B5 =0 MDEQ:BC0;870F8OB0 =0 ?>4?8A8B5 =0 MDE =5 CA?O20, BJ9 :0B> 25G5 8<0 @01>B5I 5:75<?;O@y7G0:20=5 =0 2A8G:8 ?@>F5A8 :75<?;O@8B5 =0 MpSigStub.exe A0 87:;NG5=8, ?@548 40 >?8B0B5 >B=>2> 40 0:BC0;878@0B5 ?>4?8A0.P#A;C30B0 Windefend =0 MDE =5 CA?O 40 A5 8=8F80;878@0 CA?5H=> 8 >AB0=0 =0 5B0? %1{ 5AB0@B8@09B5 <0H8=0B0 8 0:BC0;878@09B5 4> =09-=>20B0 ?;0BD>@<0 Defender 8 0:> ?@>1;5<JB ?@>4J;6020, AJ>1I5B5 =0 Microsoft.K#A;C30B0 Windefend =0 MDE =5 CA?O 40 A5 87:;NG8 CA?5H=> 8 >AB0=0 =0 5B0? %1b:BC0;878@09B5 4> =09-=>20B0 ?;0BD>@<0 Defender 8 0:> ?@>1;5<JB ?@>4J;6020, AJ>1I5B5 =0 Microsoft.]7:;NG5=85B> =0 MDE ?@5?@0I0 :J< ?@><5=;828 =0 A@540B0 (%1), :>8B> =5 A0 A8AB5<=8 ?@><5=;828.l>;O, ?@53;5409B5 87:;NG5=8OB0 A8:
'%1'
70 40 A5 C25@8B5, G5 ?@5?@0I0B :J< ?@028;=8B5 ?@><5=;828 =0 A@540B0.PA>5CA?5H=> 872;8G0=5 =0 ?@54?>G8B0=8OB0 =0 Defender 70 Windows.}:> AB5 2J7=0<5@O20;8 40 2=54@8B5 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 MDE CAB@>9AB2>, 286B5 A;54=0B0 AB0B8O 70 ?>25G5 8=D>@<0F8O.C@>25@5B5 40;8 CA;C30B0 Windows Defender A5 87?J;=O20 8 5 4>ABJ?=0.@>=D83C@8@09B5 Microsoft Defender Antivirus G@57 3@C?>28 ?@028;078A:20=8O 70 A2J@70=>ABX>=D83C@8@09B5 E81@84=> ?@8AJ548=O20=5 :J< Azure Active Directory 70 C?@02;O20=8 4><59=8>@B0; 70 70I8B0 =0 M365rBAB@0=O20=5 =0 ?@>1;5<8 A 2=54@O20=5B>, A2J@70=8 A C?@02;5=85B> =0 70I8B0B0 70 Microsoft Defender 70 :@09=0 B>G:0&;NG 70 ?@028;0 =0 MDE ?> ?>4@0718@0=50;NG 70 A5=7>@=0B0 CA;C30 =0 MDE ?> ?>4@0718@0=5.JB 4> :5H 48@5:B>@8OB0 =0 MDE ?> ?>4@0718@0=5-JB ?> ?>4@0718@0=5 =0 48@5:B>@8OB0 MDE Cyber*JB 4> 48@5:B>@8OB0 =0 MDE ?> ?>4@0718@0=56JB 4> 48@5:B>@8OB0 ProgramData =0 MDE ?> ?>4@0718@0=53JB 4> 2@5<5==0B0 48@5:B>@8O =0 MDE ?> ?>4@0718@0=5:JB 4> 48@5:B>@8OB0 70 ?@>A;54O20=5 =0 MDE ?> ?>4@0718@0=5�7B@89B5 :;NG>25B5 >B A8AB5<=8O @538ABJ@, A2J@70=8 A DC=:F8OB0 A@5IC =5?@02><5@=0 A<O=0 =0 A0<>;8G=>ABB0, 70 40 =0:0@0B5 CAB@>9AB2>B> 40 35=5@8@0 =>2 ;8G5= :;NG 8 40 A5 @538AB@8@0 >B=>2>. 7?J;=5B5 :><0=40B0 %1�O<0 :0:2> 40 A5 =0?@028. > 2@5<5 =0 2@5<5B>, 70?>G20I> >B Cyberthrottling, 8=48:0B>@JB 70 AJ18B85 =5 5 ?>B5:J; 2 ?>@B0;0 =0 MDATP.�">20 CAB@>9AB2> A5 >?8B0 40 A5 @538AB@8@0 G@57 035=B0 =0 035=B0 70 =01;N45=85 =0 Microsoft (MMA), => =5CA?5H=>, BJ9 :0B> =5 ?>44J@60 2=54@O20=5 G@57 B>78 <5B>4.�86B5 =0H0B0 >=;09= 4>:C<5=B0F8O, 70 40 @0715@5B5 :0:J2 <5B>4 70 2=54@O20=5 5 ?>4E>4OI 70 >?5@0F8>==0B0 A8AB5<0 =0 B>20 CAB@>9AB2>.,>44J@60=0 :>=D83C@0F8O 70 2=54@O20=5 =0 MDE?0H8=0B0 5 A2J@70=0 A :>=:@5B5= 845=B8D8:0B>@ =0 :;85=B =0 AAD.�#25@5B5 A5, G5  =0 :;85=B0 =0 AAD >B 20H8O :;85=B =0 MDE AJ2?040 A  =0 :;85=B0 =0 SCP, ?>A>G5= ?>-3>@5. 0 40 2848B5 845=B8D8:0F8OB0 =0 20H8O :;85=B =0 MDE, 286B5 ?>@B0;0 70 70I8B0 =0 M365M#AB@>9AB2>B> ?>44J@60 ?@54>B2@0BO20=5 =0 ?>4?@02O=5 8 5 2 AB018;=> AJAB>O=85.@SharedSignatureRoot 5 :>=D83C@8@0= 8 4>ABJ?5= 70 0:0C=B0 SYSTEM.8>=D83C@0F8OB0 =0 SharedSignatureRoot 873;5640 =>@<0;=0.T!B>9=>ABB0 SharedSignatureRoot 2 A8AB5<=8O @538ABJ@ =5 5 :>=D83C@8@0=0 8;8 4>ABJ?=0.i">20 5 A 8=D>@<0B82=0 F5;   ?@>25@5B5 40;8 :>=D83C@0F8OB0 SharedSignatureRoot 5 >G0:20=0 70 20H0B0 A@540.5>=D83C@0F8O =0 3@0D8:0 70 0:BC0;870F8O =0 ?>4?8A: %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2d@53;5409B5 =0AB@>9:8B5 =0 3@0D8:0 70 0:BC0;878@0=5 =0 ?>4?8A0 A8, :0:B> 5 =5>1E>48<> 70 A@540B0 28.C>=D83C@8@09B5 ?;0=8@0=8 A:0=8@0=8O 70 Microsoft Defender Antivirus.SignatureDefinitionUpdateFileSharesSources: %1l@53;5409B5 =0AB@>9:8B5 70 87B>G=8F8 70 A?>45;O=8O =0 D09;>25 A ?>4?8A8, :0:B> 5 =5>1E>48<> 70 20H0B0 A@540.SignatureFallbackOrder: %1U@53;5409B5 =0AB@>9:8B5 70 @575@25= @54 =0 ?>4?8A8B5, 0:> 5 =5>1E>48<> 70 A@540B0 28.�<09B5 ?@54284, G5 B078 <0H8=0 8<0 ?>;8B8:0, :>OB> ?>72>;O20 4>102O=5 A0<> =0 8740B5;8, 4>25@5=8 =0 1070 4><59=. ">20 <>65 40 ?>?@5G8 =0 A5=7>@0 =0 MDE, :>9B> B@O120 40 8=AB0;8@0 A5@B8D8:0B8 2 E@0=8;8I5B> =0 4>25@5=8 8740B5;8.�0 ?>25G5 8=D>@<0F8O 286B5 AB0B8OB0. 
0 40 87153=5B5 =5>G0:20=8 ?@>1;5<8, ?@5<0E=5B5 A2J@70=0B0 :>=D83C@0F8O =0 3@C?>28 ?@028;0: D;03>25 =0 ;>:0;=8O Authenticode= %1, D;03>25 =0 GP Authenticode = %2.04564=8 8740B5;8PAi5 <>65 40 A5 ?@>G5B5 B>G:0B0 70 A2J@720=5 =0 CA;C30B0 (SCP) >B :>=D83C@0F8>==8O 4O; =0 Active Directory.L">G:0B0 =0 A2J@720=5 =0 CA;C30B0 (SCP) AJ4J@60 =5?>44J@60=0 :>=D83C@0F8O: %1I">G:0B0 70 A2J@720=5 =0 CA;C30B0 (SCP) AJ4J@60 =5?>44J@60=0 :>=D83C@0F8O.�#AB@>9AB2>B> =5 <>65 40 A5 ?@8AJ548=8 :J< Azure AD, BJ9 :0B> 70?8AJB SCP 5 :>=D83C@8@0= 40 ?@8AJ548=O20 CAB@>9AB2>B> :J< Enterprise DRS.e">G:0B0 70 A2J@720=5 =0 CA;C30B0 (SCP) =5 5 :>=D83C@8@0=0 2 :>=D83C@0F8>==8O 4O; =0 Active Directory.y5 <>65 40 A5 >AJI5AB28 2@J7:0 A 4><59=>2 :>=B@>;5@ 70 872;8G0=5 =0 8=D>@<0F8O 70 B>G:0B0 =0 A2J@720=5 =0 CA;C30B0 (SCP).r<0 =5AJ>B25BAB285 <564C  =0 :;85=B0 =0 AAD >B 20H8O :;85=B =0 MDE 8  =0 :;85=B0 2 SCP 70?8A0 =0 20H8O 4><59=.�#25@5B5 A5, G5  =0 :;85=B0 =0 AAD >B 20H8O :;85=B =0 MDE AJ2?040 A  =0 :;85=B0 =0 SCP, ?>A>G5= ?>-3>@5. 0 40 2848B5 845=B8D8:0F8OB0 =0 20H8O :;85=B =0 MDE, 286B5 4>:C<5=B0F8OB0.p#AB@>9AB2>B> A5 C?@02;O20 >B 035=B =0 SCCM 8 =O<0 40 A5 C?@02;O20 >B @5H5=85B> 70 C?@02;5=85 =0 70I8B0B0 =0 MDE.�Configuration Manager 5 ?@87=0B 70 548=AB25= >@30= 70 C?@02;5=85 =0 70I8B0B0. Defender 70 :@09=0 B>G:0 =O<0 40 C?@02;O20 =0AB@>9:8B5 70 70I8B0 =0 CAB@>9AB20, :>8B> 25G5 A5 C?@02;O20B >B Configuration Manager. 
:> 65;05B5 40 ?@><5=8B5 B>20 ?>2545=85, B@O120 40 704045B5 ?@52:;NG20B5;O  #?@02;5=85 =0 =0AB@>9:8B5 70 70I8B0 A ?><>IB0 =0 Configuration Manager  =0  7:;. . 0 4>?J;=8B5;=0 8=D>@<0F8O 286B5 A;54=0B0 4>:C<5=B0F8O.R#AB@>9AB2>B> ?>44J@60 ?@54>B2@0BO20=5 =0 ?>4?@02O=5, => =5 5 2 AB018;=> AJAB>O=85.f86B5 C:070=8OB0 2 A;54=0B0 AB0B8O. 
!2J@65B5 A5 A ?>44@J6:0B0 =0 Microsoft, 0:> ?@>1;5<JB ?@>4J;6020.3Microsoft Defender 70 :@09=0 B>G:0   CVE-2022-232788Microsoft Defender 70 :@09=0 B>G:0   0=0;87 =0 70?;0E8B5#8?A20B ?JB8I0 ?> ?>4@0718@0=5: %1.�>;O, C25@5B5 A5, G5 ?>A>G5=8B5 ;8?A20I8 ?JB8I0 AJI5AB2C20B 8 =5 A0 ?@58<5=C20=8. >65 40 A5 =0;>68 40 AJ74045B5 ;8?A20I8B5 ?0?:8 AJA A8AB5<5= :>=B5:AB.PAW">20 CAB@>9AB2> =5 CA?O 40 A5 @538AB@8@0 G@57 Microsoft Endpoint Configuration Manager.�">78 ?@>1;5< <>65 40 2J7=8:=5, 0:> %1 =0 :;NG0 >B A8AB5<=8O @538ABJ@ ;8?A20 >B: %2. 
0 40 AJ74045B5 ;8?A20I8O :;NG >B A8AB5<=8O @538ABJ@, <>65B5 40 87?>;720B5: %37#AB@>9AB2>B> 4>:;0420 =0 87B5:J;  =0 >@30=870F8O: %1.U"@O120 40 87:;NG8B5 CAB@>9AB2>B> >B B078 >@30=870F8O 8 A;54 B>20 40 3> @538AB@8@0B5 2 B5:CI0B0 A8 >@30=870F8O.
!2J@65B5 A5 A ?>44@J6:0B0 =0 Microsoft, 0:> =O<0B5 4>ABJ? 4> A:@8?B0 70 45@538AB@8@0=5 AJA A?><5=0B8O OrgID.
015;56:0: 0 40 2848B5 B5:CI8O OrgID, >B845B5 2 ?>@B0;0 =0 MDE 8 I@0:=5B5 2J@EC ?>B@518B5;A:>B> 8<5 2 3>@=8O 45A5= J3J;.&5=BJ@ 70 70I8B0�1J@=5B5 2=8<0=85, G5 CAB@>9AB2>B> 8<0 3@5H:0  0@5640=5 =0 ;8G=8O :;NG 70 A5@B8D8:0B0 70 C4>AB>25@O20=5 =0 :;85=B0  2 @538AB@0F8>==8O D09; =0 OpsMgr.�58=AB0;8@09B5 8 8=AB0;8@09B5 >B=>2> MMA (035=B 70 =01;N45=85 =0 Microsoft) =0 B>20 CAB@>9AB2> 8 ?@>25@5B5 40;8 ?@>1;5<JB ?@>4J;6020.95AB=>B> 2@5<5 =0 CAB@>9AB2>B> =5 AJ2?040 A G0A0 2 Azure.�@>25@5B5 40;8 <5AB=>B> A8AB5<=> 2@5<5 5 B>G=> 8 40;8 5 704045=0 ?@028;=0B0 G0A>20 7>=0.
:> B>20 CAB@>9AB2> 5 ?@8AJ548=5=> :J< 4><59=, C25@5B5 A5, G5 CA;C30B0 "@5<5 =0 Windows" A5 87?J;=O20 8 CAB@>9AB2>B> 5 A8=E@>=878@0=> A 2@5<5B> =0 20H8O 4><59=. 
0 ?>25G5 8=D>@<0F8O :0: 40 :>=D83C@8@0B5 8 :>=B@>;8@0B5 A8=E@>=870F8OB0 =0 2@5<5B>, 286B5 AB0B8OB0, 70 40 A5 C25@8B5, G5 <5AB=>B> 2@5<5 2 BIOS 5 B>G=>.WindowsTimeO#AB@>9AB2>B> @01>B8 A ?>-AB0@0 25@A8O =0 System Center Endpoint Protection: %1.�"@O120 40 =04AB@>8B5 4> =09-=>20B0 =0;8G=0 25@A8O, 70 40 >A83C@8B5 AJ2<5AB8<>AB 8 40 ?>72>;8B5 >B:@820=5B> =0 7;>=0<5@5= A>DBC5@ 40 A5 @538AB@8@0 2 ?>@B0;0 70 70I8B0 =0 Defender 70 :@09=0 B>G:0.EJ7=8:=0 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0.-#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0. @8G8=0B0 <>65 40 1J45 2 B>20, G5 CAB@>9AB2>B> =5 >B3>20@O =0 ?@5420@8B5;=8B5 878A:20=8O 70 :0=0;0 70 C?@02;5=85 =0 Microsoft Defender 70 :@09=0 B>G:0.>@5420@8B5;=8 878A:20=8O 70 Microsoft Defender 70 :@09=0 B>G:0EJ7=8:=0 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0.PA�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. 8A?5G5@JB =0 :@09=8 B>G:8 =0 Microsoft >10G5 =5 5 :>=D83C@8@0= G@57 F5=BJ@0 70 4<8=8AB@0F8O 40 @07@5H020 :>=D83C@8@0=5 =0 70I8B0B0 =0 Microsoft Defender 70 :@09=0 B>G:0.4>=D83C@0F8O =0 :;85=B =0 Microsoft Endpoint Manager!J7=8:=0 ?@>1;5< AJA A2J@720=5B>.#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0, :>OB> <>65 40 A5 4J;68 =0 ?@>1;5< AJA A2J@720=5B>. 
#25@5B5 A5, G5 CAB@>9AB2>B> <>65 40 :><C=8:8@0 A :@09=8 B>G:8 =0 MDE.C@09=8 B>G:8 =0 Azure Active Directory 8 Microsoft Endpoint Manager(1I0 3@5H:0 ?@8 E81@84=> ?@8AJ548=O20=5.H#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0, B0:0 G5 >?5@0F8>==0B0 A8AB5<0 =5 CA?O 40 872J@H8 E81@84=> ?@8AJ548=O20=5.
86B5 2@J7:8B5 70 >BAB@0=O20=5 =0 =587?@02=>AB8 ?@8 E81@84=> ?@8AJ548=O20=5 =0 =82> >?5@0F8>==0 A8AB5<0.^BAB@0=O20=5 =0 =587?@02=>AB8 ?@8 E81@84=8 CAB@>9AB20, ?@8AJ548=5=8 :J< Azure Active Directory5AJ>B25BAB285 =0 :;85=B0.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0, BJ9 :0B> 20H8OB  =0 :;85=B =0 Microsoft Defender 70 :@09=0 B>G:0 =5 AJ2?040 A 20H8O  =0 :;85=B =0 Azure Active Directory. 
#25@5B5 A5, G5 845=B8D8:0B>@JB =0 :;85=B0 =0 Azure Active Directory >B 20H8O :;85=B =0 Defender 70 :@09=0 B>G:0 AJ2?040 A 845=B8D8:0B>@0 =0 :;85=B0 2 SCP 70?8A0 =0 20H8O 4><59=./%81@84=0 3@5H:0   B>G:0 70 A2J@720=5 =0 CA;C30.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J?@5:8 B>20, 70?8AJB =0 B>G:0 70 A2J@720=5 =0 CA;C30 (SCP) =5 5 :>=D83C@8@0= ?@028;=> 8 CAB@>9AB2>B> =5 <>60 40 A5 ?@8AJ548=8 :J< Azure AD. ">20 <>65 40 A5 4J;68 =0 B>20, G5 SCP 5 :>=D83C@8@0= 40 A5 ?@8AJ548=O20 :J< Enterprise DRS. 
#25@5B5 A5, G5 70?8AJB SCP A>G8 :J< AAD 8 G5 SCP 5 :>=D83C@8@0= A?>@54 =09-4>1@8B5 ?@0:B8:8. 0 ?>25G5 8=D>@<0F8O 286B5 2@J7:8B5.->=D83C@8@0=5 =0 B>G:0 70 A2J@720=5 =0 CA;C30@5H:0 2 A5@B8D8:0B.A#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 70 70I8B0 ?>@048 3@5H:0 2 A5@B8D8:0B0 =0 CAB@>9AB2>B>. 
!5@B8D8:0BJB =0 CAB@>9AB2>B> ?@8=04;568 =0 4@C3 :;85=B. #25@5B5 A5, G5 A5 A;5420B =09-4>1@8B5 ?@0:B8:8 ?@8 AJ74020=5 =0 ?@>D8;8.04564=8 ?@>D8;8 =0 A5@B8D8:0B8PA'5?@028;=0 :>=D83C@0F8O =0 AAD Connect.R#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0 ?>@048 =5?@028;=0 :>=D83C@0F8O 2 AAD Connect. 
0 40 >?@545;8B5 :0:2> ?@5G8 =0 CAB@>9AB2>B> 40 A5 @538AB@8@0 2 AAD, >1<8A;5B5 87?J;=5=85B> =0 8=AB@C<5=B8B5 70 >BAB@0=O20=5 =0 =587?@02=>AB8.D=AB@C<5=B 70 >BAB@0=O20=5 =0 ?@>1;5<8 ?@8 @538AB@0F8O =0 CAB@>9AB2>T!?5F80;878@0=8 8=AB@C:F88 70 >BAB@0=O20=5 =0 =587?@02=>AB8 70 Windows Server 2012 R2
@5H:0 2 DNS.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0 ?>@048 3@5H:0 2 DNS. @>25@5B5 8=B5@=5B 2@J7:0B0 8/8;8 =0AB@>9:8B5 =0 DNS =0 CAB@>9AB2>B>. 520;84=8B5 =0AB@>9:8 =0 DNS <>65 40 A0 >B AB@0=0 =0 @01>B=0B0 AB0=F8O. 
0 ?@028;=> DC=:F8>=8@0=5 Active Directory 878A:20 40 87?>;720B5 DNS =0 4><59=0 (0 =5 04@5A0 =0 <0@H@CB870B>@0). 0 ?>25G5 8=D>@<0F8O 286B5 2@J7:8B5.)@>1;5< AJA A8=E@>=870F8OB0 =0 G0A>2=8:0.#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. J7=8:=0 >10G5 3@5H:0 2 ?>B>:0 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0. @>25@5B5 40;8 G0A>2=8:JB 5 =0AB@>5= ?@028;=> 8 5 A8=E@>=878@0= =0 CAB@>9AB2>B>, :J45B> 2J7=8:20 3@5H:0B0.!5CA?5H=> 87B53;O=5 =0 ?@028;0B0.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0. #AB@>9AB2>B> >10G5 =5 CA?O 40 87B53;8 ?@028;0B0 70 70I8B0 =0 :@09=8B5 B>G:8 >B MEM. 
#25@5B5 A5, G5 CAB@>9AB2>B> <>65 40 :><C=8:8@0 A :@09=8 B>G:8 =0 MDE.5CA?5H=> >B?8A20=5.�#AB@>9AB2>B> 2 <><5=B0 5 70?8A0=>, => B@O120 40 1J45 ?@5<0E=0B>. @>F5AJB =0 >B?8A20=5 >10G5 15H5 =5CA?5H5= ?>@048 2@5<5==0 3@5H:0. 
@>25@5B5 40;8 CAB@>9AB2>B> <>65 40 :><C=8:8@0 A :@09=8 B>G:8 =0 MDE.!5CA?5H=> ?@8A2>O20=5 =0 ?@028;0.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0 8 CA?O 40 87B53;8 ?@028;0B0 70 70I8B0 =0 :@09=0 B>G:0 >B MEM. J7=8:=0 >10G5 3@5H:0 ?> 2@5<5 =0 ?@8A2>O20=5B> =0 ?@028;0B0.5CA?5H5= >BG5B 70 ?@028;0.�#AB@>9AB2>B> 5 CA?5H=> @538AB@8@0=> 2 Microsoft Defender 70 :@09=0 B>G:0 8 CA?O 40 87B53;8 ?@028;0B0 70 70I8B0 =0 :@09=0 B>G:0 >B MEM. J7=8:=0 >10G5 ?@>1;5< ?> 2@5<5 =0 4>:;0420=5B> =0 ?@028;0B0 :J< MEM.q">20 CAB@>9AB2> =5 <>65 40 1J45 @538AB@8@0=> 2 B5:CI>B> AJAB>O=85, BJ9 :0B> =53>2>B> ImageState 2 '%1' 5 =5?J;=>.�">78 ?@>1;5< <>65 40 2J7=8:=5, 0:> >1@07JB =0 >?5@0F8>==0B0 A8AB5<0 5 872J@H8; =O:>;:> ?>A;54>20B5;=8 >?8B0 70 87?J;=5=85 =0 sysprep 8 A8AB5<=8OB @538ABJ@ 5 704045= =0 '%1'.
!2J@65B5 A5 A ?>44@J6:0B0 =0 Microsoft, 0:> ?@>1;5<JB ?@>4J;6020.3=D>@<0F8O 70 AJAB>O=85B> =0 =0AB@>9:0B0 =0 WindowsY!B>9=>ABB0 ImagePath 2 A8AB5<=8O @538ABJ@ <>65 40 5 18;0 ?>4?@025=0 ?@548 @538AB@8@0=5B>.q@53;5409B5 B078 3@5H:0 8 ?@>25@5B5 ImagePath (2 @0<:8B5 =0 %1), 70 40 A5 C25@8B5, G5 A>G8 :J< 20;845= ?JB =0 %2.6B:@8B8 A0 >3@0=8G5=8 AJ18B8O 70 :815@40==8B5 =0 SenseMDE 8 ConfigMgrA#AB@>9AB2>B> A5 C?@02;O20 A ?><>IB0 =0 Configuration Manager 8 Microsoft Defender 70 :@09=0 B>G:0. #?@02;5=85B> =0 ?@028;0B0 ?@57 420B0 :0=0;0 <>65 40 4>2545 4> :>=D;8:B8 8 =565;0=8 @57C;B0B8. 
0 40 87153=5B5 B>20, ?@028;0B0 70 70I8B0 =0 :@09=8B5 B>G:8 B@O120 40 1J40B 87>;8@0=8 2 54=0-548=AB25=0 ?;>A:>AB =0 C?@02;5=85.A!J2<5AB=> AJI5AB2C20=5 A Microsoft Endpoint Configuration Manager !B0BCAJB =0 70?8A20=5 5 ?@><5=5=#AB@>9AB2>B> A5 C?@02;O20 A ?><>IB0 =0 Configuration Manager 8 Microsoft Defender 70 :@09=0 B>G:0. #AB@>9AB2>B> 5 >B?8A0=> >B @5H5=85B> 70 C?@02;5=85 =0 :>=D83C@0F8OB0 =0 70I8B0B0 8;8 70I>B> >1E20BJB =0 87?J;=5=85 5 ?@><5=5=, 8;8 5B8:5BJB MDE-Management 5 ?@5<0E=0B >B CAB@>9AB2>B>.�@><5=;820B0 =0 A8AB5<=0B0 A@540 %%TEMP%% (8 %%TMP%%) =5 5 45D8=8@0=0. ">20 <>65 40 4>2545 4> A@82>25 2 @01>B0B0 =0 Windows Defender 8 4@C38 A8AB5<=8 :><?>=5=B8, :>8B> @07G8B0B =0 2@5<5==0B0 48@5:B>@8O.�5D8=8@09B5 ?@><5=;828B5 =0 A8AB5<=0B0 A@540 TEMP 8 TMP. !B>9=>ABB0 ?> ?>4@0718@0=5 5 %%SystemRoot%%\TEMP 70 A8AB5<=8 0:0C=B8. #25@5B5 A5, G5 ?JBOB AJI5AB2C20 8 8<0 ?>4E>4OI8 @07@5H5=8O.�8@5:B>@8OB0 %%TEMP%% =5 5 4>ABJ?=0. ">20 <>65 40 ?@548728:0 >B:078 2 :><?>=5=B8B5 =0 Windows Defender, :>8B> B@O120 40 70?8A20B 2@5<5==8 D09;>25.e@>25@5B5 40;8 48@5:B>@8OB0 %%TEMP%% AJI5AB2C20 8 B5:CI8OB 0:0C=B 8<0 @07@5H5=8O 70 G5B5=5/70?8A20=5.�8@5:B>@8OB0 %%TEMP%% 5 =0AB@>5=0 =0 ?JB, :>9B> =5 5 ?> ?>4@0718@0=5. 5AB0=40@B=8OB ?JB TEMP <>65 40 ?@8G8=8 ?@>1;5<8 A :><?>=5=B8, :>8B> ?@85<0B <5AB>?>;>65=85B> ?> ?>4@0718@0=5.PA�@53;5409B5 40;8 ?5@A>=0;878@0=8OB ?JB %%TEMP%% 5 C<8H;5=. :> =5 5, 2J@=5B5 ?@><5=;828B5 =0 A8AB5<=0B0 A@540 TEMP 8 TMP :J< AB>9=>ABB0 ?> ?>4@0718@0=5 (%%SystemRoot%%\TEMP 70 A8AB5<=8 0:0C=B8).P !��_� F�e �R.! ��W�� %�a <q!c�@!� �� (�V
�>_��� ���e�YW  !�c) ��O7U@��.!_.�� �'� ��	.! �U >KJ�4Y��� BQ ����H�3 ��� "D���9e �)�  (�:� �z_3 ��9��Y ��W [�U�TS[) -Fe�W�B���, B[�K �g �U Y���<m �� e� WMm��7 B'7 �� I���]@�� eQ ����� �CJTU �@@��� /]_m[. 
� 1W <�Y� )��1Ome��? �� � �8g#U0�W�; uV�% ���9�TU ��3 �?��>�Hg @B4]� U�U gQ eR� UB�	>M.�� /� �|kO|d[-a <�R/HT R�] ���!T� c� OHJ>�� �s7 �� m/]]WI! �.!�m�]a)�DU �QY U!�aBS� :�C $� _Z�aB<_�SU�e
�KeU><\�c_ZMU��__^.!D[.!.��[�U A9 %����� q� c> +��.!Y�W�?	M ��Mm 3U @�O�� aT�W�e� �S��q�BU �Y �� �\"� ��A���� ��:> ��BS�> �3m�[[�>�U �OQ m�_[W?! �QS $;�_Z�]c5<_��YMIc�;e3�@\�B_`Q��V�[_\QD_�. b= �U<�[[��9] ���F� ��S ^`f�� ��Q��c OM: %1N�<Q�U� DQ�� B[�c �%+_ [��7O �Q�U H�c [4� �[M <�3D s9/�W� �7?e )?_c!B�.��HV�W � c ��3 ���;@��! ]O�TY] �] ;Me ��[e�:<T� �� g[�_ ���AQ. �e -a YT�><<�� �� /?[e0<> cR5 H�� ���B ��O ��c�<�B @�3���mH7 08� @U���
BW�� ���J�<+e��a. � �O m�ST �����m�B)�� 3��� g� B[T Q
i<�?g�eVM9F$�JQ�Y tW���u_ ]�Y�.!Y[ �M �'M �U�_M�e �5�H��O ��Y D��M)�g [�Y���Y �!W/�] �_a�Km?� ��):�S ����UYQ LA�U.! �� �R ��@B�I��! �F����Dm�;c ��3�J<�([): %1&�R ����� �U ]�	
�]_��><� ��L�4W� e� �+W1a��B ���Y ��3 H����He ��� ��[ �2>� g� ���I:�� c[7 T�����g U�A�Y�e^ ��B����a �O�m ���. &Qu��O, c[�.! ��U  ���!�Y� �W��# �= [_)#?<�IB �� g' @�!�
��]. 
  !_M O<1�� D� F� -.!��]c��# @�BR(a) �O>< e=T 42��� _w[��m I��U�F<�9� ��O��JB7([).5Zc �H��WOIm�K� ��O��2![ �  cR� Z�_eT< 1HeO�> ��5@i��B��U �U[+#D<�8B ��+!s� �
��OYT� U�� ���<-� � �WO \=U Z�%�i:�8# (� \\) �] 5F4L: �I c%T �+
.=fR ���AM ��_ a��5U_�kB!C �;2��� B� �	S�U��g ��M�5W ��W 8@�)�e �K ��] 2<� e> �M��:1� B%Q ��@�/�� [��S�e� �1>+��[ ���< �. 
 &��Q�O, B=TY� H�] � ��VB�O� �W/�# g[7 �UUV�<T9B 1� �'7 �1!���a �� B� � � !�m�B�g�1I c[�g �0� �	�Y IRQF � `^ �[ �K�L<��. 
  >5�]M ��gB �)�U�_O�� ]k���OB ��S �]U�]c����.M�����5 VU ��� �@-c�-�c7 �;� �1MU F�B R�� ���-[����/H# ��4JV<�cw ���<����.��@]� ?]_S� CQi ��:�� c% Y��<<7?� [���U�g� �g	[ e� @U1eTAg B%� ��-�� ���m _����-D#, ��3 <�O.! V����<�B��� 3��Y �� c[� !WH8].0VY>]��e 7�D�W ��� �I@�WH� - V--2022-232782�WO�aQ�B ���.!��QY �>W ���V9g - dRS�e 8�!^BW	_W����7 �_ W_�;�?! ��B% �� Q:� ��Ya)�K �� B=� WAS�]��g ���?�3 ��S ���) e � [.!�a�UM >5�U� o��c �= ]MHUQO �� ��]FW ��i =��� ��e)<�@ �Y�e��W�  D� U��2V<�g^.5V
Y�_��e 5��H��3 �>3 -8���V?c _�cM ��S "V \QKa�3��R-[ <�[�D� '4a �/!�� c� ��L�S �[ _^�UT.�6 Y4]'T� ��W�I# V��B�0:�z�g�>� �[4U ��� "�<9)L.!!.
 b%� �3��U ���m B=M 	Y�][ I�_: %1b%�_ �� =���; �� B% ^�b �A1� e ��_ ��e %��� ��Sm�]_/��a c� u3�� �� eRT M��QgT� @�[ (�Y�!S<�g�\-
SQa��B\�+D��I[ ����S ����9.!� f[��c �W>cQ�B�>�\� wJO).
 �B7�[� ��:-�e� c= � 9[ �� e'Q ��e% �K S7a5e �R5 �T�<+_U��Fa �Y�m �3Fg ��@3 �� I�.!���.ET�W7 �_ �Kc�-[@����9 �0@�2@ L�g �U H�� ^7B UQ#+_��Y5 �V�[ �<�q�.l !�] .!K_iY7 ���;	�/���C B� �/>��� 8
 �� _ V_ �>� LB�	:7�. ���c�
g ��Y�_��� _��@�Ye -� �[[qQ @7S]�]�a.M" 	�F�)!�W4gW>H OU ��� ��
� �[ �O���B�D G�B�1W:  Y�g�c��F �Y>< _�3�/�#.T�BT[Q U��/� c'-U .!OY�Y <Qaa�# e1 �D�T�]�4I B=� J>1�7��# )]_q� �� 3TU�@�T �e: %1a^�@@�3B.! b;` ��'�Y] Y�  �e MF�L@ �D �%�a <�[W9�. �=�_ � ���Ae �;H�����cC e� �� <��.��@Q�a7 �?U�Ag c'.! 	����!�S� ���=��[ (��gR�9 ��9�\`�� �(�V�\��:+
��a\��
Y�[��g\!3C���!Y�R^\� �8�)#�Ug�>�\ZA\00010002) B1 .!Ia�YT )B ��g�� ] <�F-<�< O7qk�UT� 
��[�UU ��W M KQ�e���cw cO �� 	<���."�-�=O _�/B�_ 0�� "A` U�qq�W<��g[bb= 1.2 	>)TDe @3Og���@ �U D�� ��J@� �I BR�] m��=�;. f%�_ �48 ���Q�c �FD5Ag��WB� g� � �BO��.��!_� A�K��Y< e[B d?^ 1.2 A<��D� )[ QK�L<� (�)c')K �?�\^�^d��\�WO7De��K�S�<^Tg\�;�UMB\\qU)B� �����MW[\Z&�"�� \ 3�g�	�>_\b?Z 1.2\!����).PAX
� 
)�%Q�a S 8�g H�J< QI e%+[ <��%���. "%VU A�� ����c 	�?�7�c-�WB� ��  	B�m.��!��_T �� ��Y< �%c !� �Tw��[9!7"!#MYV�'< �U M �J<5� (�+e[V8 $�� �\\�Zb�\
�3�5?�
�8�3�B\c\!> �Y�B\\��kU+g� Y��-��YU\�GE��\�w�=8�<�O�e%<[\�).�]+	 &XA e�]e ��+<���gH�U8�U�c7�c��F �m�OF�8c )[ ��U�L> �W ���<7� p/� =
: Bac. dR+[ <�� ���
c  @U�_���� ��  H�B��S8 W��ST���Y (�E: !-[�� &mLS.!:B�).PA>=B@>;8@0= 4>ABJ? 4> ?0?:0T5CA?5H=> 70@5640=5 =0 <>4C;0 mde_cfa_evaluation   4803=>AB8:0B0 =0 CFA =5 5 =0;8G=0<@>25@5B5 8=AB0;8@0=5B> =0 MdeDiag 8 @538AB@0F8OB0 =0 <>4C;0W @538AB@0F8>==8B5 D09;>25 =5 A0 >B:@8B8 70A8G0=8O =0 CFA (:>=B@>;8@0= 4>ABJ? 4> ?0?:8)15 A5 878A:20 459AB285   CFA DC=:F8>=8@0 =>@<0;=>>=0;878@0=8 A0 %1 ?>4>7@8B5;=8 D09;0 70 AJAB>O=85B> =0 4>25@85b@53;5409B5 CfaTrustChecks.txt 2 4803=>AB8G=8O 87E>4 70 ?>4@>1=8 @57C;B0B8 >B 0=0;870 =0 4>25@85B>OCFA =5 AG8B0 %1 70 4>25@5=, 70I>B> >1@07JB =0 ?@>F5A0 =5 5 8725AB5= :0B> 4>1J@.�>1025B5 3> :J< A?8AJ:0 A @07@5H5=8 ?@8;>65=8O 8;8 4>1025B5 0=B828@CA=> 87:;NG5=85 70 B>78 D09;, 0:> A5 4>25@O20B5 =0 B>78 D09;.O%1 =5 A5 AG8B0 70 4>25@5= >B CFA, 70I>B> @>48B5;OB <C =5 5 8725AB5= :0B> 4>1J@.F%1 =5 A5 AG8B0 70 =045645= >B CFA, BJ9 :0B> =53>28OB @>48B5; 5 A:@8?B.G%1 =5 A5 AG8B0 70 =045645= >B CFA, BJ9 :0B> 70@548 =5=045645= D09;: %2.Q%1 =5 A5 ?>;720 A 4>25@85 >B CFA, BJ9 :0B> 5 8=65:B8@0= >B =5=045645= ?@>F5A: %2.M>1025B5 0=B828@CA=> 87:;NG5=85 70 B>78 D09;, 0:> A5 4>25@O20B5 =0 B>78 D09;.\>1025B5 0=B828@CA=> 87:;NG5=85 70 B>78 ?@>F5A, 0:> <C 8<0B5 4>25@85 (87:;NG5=85 =0 ?@>F5A).
@>F5A: %1CFA AJ18B8O:  - 59AB285: %1, ?@8G8=0: %2!J18B8O 70 70@07O20=5:"  - TaintType: %1, TaintReason: %2#:070=8O: %1(%1 ?>2B>@5=8O)}ASR %1 GUID '%2' (87B>G=8:: %3) 8<0 2>45I8 8;8 :@09=8 8=B5@20;8/@0745;8, :>8B> <>30B 40 ?>?@5G0B =0 ?@8;030=5B> =0 ?@028;>B>.�@5<0E20=5 =0 =0G0;=8B5 8 :@09=8B5 15;8 ?>;5B0 >B GUID =0 ASR ?@028;>B> 2J2 20H8B5 3@C?>28 ?@028;0 8;8 :>=D83C@0F8O =0 A8AB5<=8O @538ABJ@.�ASR %1 GUID '%2' (87B>G=8:: %3) AJ4J@60 D83C@=8 A:>18. GUID B@O120 40 A5 704020B 157 A:>18 (=0?@8<5@ 56a863a9-875e-4185-98a7-b882c64b5ce5).v@5<0E=5B5 D83C@=8B5 A:>18 >B GUID =0 ASR ?@028;>B> 2J2 20H8B5 3@C?>28 ?@028;0 8;8 :>=D83C@0F8O =0 A8AB5<=8O @538ABJ@.�ASR '%1' 70 87:;NG20=5 (87B>G=8:: %2) 8<0 2>45I8 8;8 :@09=8 8=B5@20;8/@0745;8, :>8B> <>30B 40 ?>?@5G0B =0 AJ2?045=85B> =0 87:;NG5=85B>.�@5<0E20=5 =0 =0G0;=8B5 8 :@09=8B5 15;8 ?>;5B0 >B ?JBO 70 ASR 87:;NG20=5 2J2 20H8B5 3@C?>28 ?@028;0 8;8 :>=D83C@0F8O =0 A8AB5<=8O @538ABJ@.�ASR %1 GUID '%2' (87B>G=8:: %3) =5 5 20;845= GUID. G0:20= D>@<0B: xxxxxxxx-xxxx-xxxx-xxxx-xxxx (=0?@. 56a863a9-875e-4185-98a7-b882c64b5ce5).PA�>@838@09B5 GUID =0 ASR ?@028;>B> 2J2 20H8B5 3@C?>28 ?@028;0 8;8 :>=D83C@0F8O =0 A8AB5<=8O @538ABJ@, 70 40 87?>;720B5 20;845= D>@<0B =0 GUID 157 4>?J;=8B5;=8 7=0F8.��X E
!�]W�H '%1' (]OkYA.!: %2) QFe��8[ � ���;B-WW.!�c�W� ('..') _m���. ��cY Y_�B�VI '..' �=.! T���	B�� 6
@s ��e[ <�� J� m�A' 2�1�MY �[4� gR.! @Vc�Y> �IcU� _�Tac[, ]�B�g>� 6@�I�� B[ .!��B�U/�  L���I +cU )�c5F��� ]���.��@<��7 e'M ^ QE�:�UV��  cOC I�e= � ��<>^-S�[�>� �J]�!�c ��eR g%0e �M_ H�� 	�?g�-D '..' U�#<�D�a. V�;c ��U_��K] �� +�3�U>�B ��K�O O7X�	g DQ�-0��F-�B 5E�<�]��  7;gU/M] g ����- :�0� e�<�.PA90:2> ?@54AB02;O20B 4803=>AB8G=8B5 ?@>7@5=8O =0 Defender?=803=>AB8G=8B5 ?@>7@5=8O =0 Defender A0 8=AB@C<5=B 70 A0<>?><>I ?@8 4803=>AB8:0, :>9B> AJ18@0 8 0=0;878@0 4803=>AB8G=8 40==8 8 ?@54>AB02O >BG5B, :>9B> ?><030 70 >BAB@0=O20=5 =0 ?@>1;5<8 A ?@>872>48B5;=>ABB0 =0 28@BC0;=8 <0H8=8 A Windows 2 Azure. >:C<5=B0F8OB0 70 Windows =0 4803=>AB8G=8B5 ?@>7@5=8O =0 Defender 5 %1.)B:J45 40 70?>G=0 ?@53;540 =0 B>78 >BG5B?
0?>G=5B5 A @0745;0 "1I ?@53;54". @53;5409B5 ?@5?>@J:8B5 8 2@J7:8B5 70 :>=AB0B0F88B5. 0CG5B5 :0: B5 <>30B 40 ?>2;8OOB =0 ?@>872>48B5;=>ABB0, :0:B> 8 70 =09-4>1@8B5 ?@0:B8:8 70 >?B8<878@0=8 70 ?@>872>48B5;=>AB :>=D83C@0F88. 0CG5B5 ?>25G5 70 ?@53;540 =0 >BG5B0 %1.C0:J2 B8? 40==8 A5 AJ18@0B >B 4803=>AB8G=8B5 ?@>7@5=8O =0 Defender?O803=>AB8G=8B5 ?@>7@5=8O =0 Defender AJ18@0B 8=D>@<0F8O 70 :>=D83C@0F8OB0 =0 Windows VM, 48A:>25B5 8;8 3@C?8B5 70 AJE@0=5=85, ?>:070B5;8 70 ?@>872>48B5;=>AB, ?>B@518B5;8B5 =0 3>;5<8 @5AC@A8, @538AB@0F8>==8 D09;>25 8 @07;8G=8 ?@>A;54O20=8O. >4@>1=>AB8 70 2840 8=D>@<0F8O, :>OB> A5 AJ18@0 >B 4803=>AB8G=8B5 ?@>7@5=8O =0 Defender, A0 %1.PAP�P�P�P��pJ7=8:=0;0 5 3@5H:0 ?@8 AB0@B8@0=5B> =0 LUA <>4C;0.

xJ7=8:=0 3@5H:0 ?@8 70@5640=5B> =0 <>4C;0 =0 LUA D09;0.

dJ7=8:=0;0 5 A8=B0:B8G=0 3@5H:0 2 LUA <>4C;0.

TJ7=8:=0;0 5 3@5H:0 2 ?0<5BB0 =0 LUA.

HJ7=8:=0;0 5 >1I0 3@5H:0 2 LUA.

P0ABJ?8;0 5 ?0=8G5A:0 3@5H:0 2 LUA.

x7?J;=5=85B> =0 LUA 5 ?@5:JA=0B> >B A83=0; 70 A?8@0=5.

�5CA?5H=> 48=0<8G=> :>=D83C@8@0=5 =0 <><5=B0;=8 A=8<:8 =0 :C?G8=0 70 ?@>F5A0.

04VS_VERSION_INFO����e��e?�StringFileInfol040204B0LCompanyNameMicrosoft Corporation�<FileDescription803=>AB8G5= 42830B5; =0 Microsoft Defender 70 :@09=0 B>G:0BInternalNamedefenderdiag.dll�0LegalCopyright� Microsoft Corporation. A8G:8 ?@020 70?075=8.ROriginalFilenamedefenderdiag.dll.muip(ProductName?5@0F8>==0 A8AB5<0 Microsoft� Windows��;FileVersion4.18.26060.3008 (df1b0eba8e0e68e7272235d6dea4de3285c715b9)DProductVersion4.18.26060.3008DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX�%0�%w	*�H��
��%h0�%d10
	`�He0\
+�7�N0L0
+�70	���010
	`�He [
�MJ��1
e=ю���D&����1���s��
�0��0��3zk�ճ��z0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110
260219193722Z
261017193722Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�"0
	*�H��
�0�
���
���xT�	�8+;�H'��h�<&�s�7\A}��;��_��=)ؔ6-� �9��
���5p^W�O���$:���dB�A�F�O�� 5��f��rvYRU_t���%�
0��b4�^����=��݌vOr�5��HT	�d���)#r�'ҳ'ϙ;��V����%=�(R64.���o�u��+j��
���A��`p�5�]�N0>iv�W��o��[3T�z+�:4aCCl@�U>���r#uN^7���v0�r0U%0
+�7
+0U��:�a8��B�~�J�$�(0EU>0<�:0810UMicrosoft Corporation10U
501107+5068660U#0��)9�ėx͐��O��|U�S0WUP0N0L�J�H�Fhttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl%200a+U0S0Q+0�Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0U�00
	*�H��
��T?i�t���:�]�?�T]�hd��z������B���s��=�oY�^Sxg��+OU�J%⩺��v��/V�A���'a����Q���=5�\�����[ݻ�F,�`�
4�r�̅/�Ag�?�o�ԗ�E�H��BNN�,�g?���Q�Dp��t�
u��Wtu����
g�M.u���V&h�{�Mp�9��j�Â���,N�&&�-�ƶ��: FF�2󨺇0�P0��t\��&���؞p	>��ys0��0���
avV0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
111019184142Z
261019185142Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110�"0
	*�H��
�0�
�����.	����i�!�i33��T����� ��ҋ�8����-|by��J?5 p���k�6u�1ݍp��7�tF�([�`#,��G�g�Q'�r��ɹ;S5|���'�����#	o�F��n�<A�ˣ?]jM�i%(\6��C
��������['�'x0�[*	k"�S`,�hS��I�a��h	sD]}�T+�y��5]l+\μ�#�on�&�6�O�'��2;A�,���w�TN�\�e�C���mw�Z$�H��C0�?0	+�70U�)9�ėx͐��O��|U�S0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��|qQ�y�n��9>�<Rn+?s��h�H�4M��&�1F�ay�8.Ek��(�����	��L
6fj���������@26v�Zƿ���Ӭ�h�b��TlP0X��|���N���|�sW�R!s4Z�V��	����~�����?�rS��c��=1e�������=����BА�_T���G�o�sNA�@�_�*��s�!(���s9_>�\`����	���Q�fG���=�*hw��Lb{��Ǻz�4Kbz����J7�-�W|�=ܸZ��ij�:��n�i!7ށ�ugӓW^)9��-���Es[���z��FX�^���g�l5��?$�5�
u�V��x,��Ј���ߺ~,c��#!�xl�X6+�̤��-����@�E�Ί\k>��p*
j�_G��c
2��6*pZ�BYqKW�~���!<��Ź���E��� ����ŕ�]b֠c �uw}=�E�����W�o3��w�bY~1�0�
0��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113zk�ճ��z0
	`�He���0	*�H��
	1
+�70
+�710
+�70/	*�H��
	1" �*�0�
�.U��"m�7i�?��7���r0B
+�71402��Microsoft��http://www.microsoft.com0
	*�H��
���Vr��$�Z�_��_��9[�:�7�~g�A����aN�NS���J"z�9ޡ�0^��P;��'��x��L�MF�r�d/Tc��j����	}S�S܋�i�(ژA��V�:����qp*����oH� �l��|P>L�
�I
���z�r�¯��ZNJ�����Q
=��܈gw��Z�p�(n�D��<ĬM���XK&':#��%��OQ_V�9U�[�gt�	HeH�փ�xwY��v��O�-r���0��
+�71��0�|	*�H��
��m0�i10
	`�He0�R*�H��
	��A�=0�9
+�Y
010
	`�He cRρ�X0�l�q,�I�Ab���/^b?>s�j1J���20260622202611.542Z0��Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:A935-03E0-D9471%0#UMicrosoft Time-Stamp Service���0� 0��3'��ñ.W-'0
	*�H��
0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
260219194004Z
270517194004Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:A935-03E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��
�0�
���l�|3�/���
iiܾzR/	��K�̒[�pH+�-�+�P���MIu���v�>�!�f��Lj���Y[~d���<��j����?
M�����c��5��pU���Ȍ�=�C��oL�Æc/���Xw�D��O�d���L���BD����Q���
튀���z��g(9}[C�HF��/6����P'�C��X���)��j�����&G���=]V�S&�:��Ѝ�.�-�@��L�����c�ph�^Տ�C�doh_�|v/�,I����D�XB	�^(	] ){'����H�@�B��y�C[cwIC�� L4-V���&1�"�xl�^I�c���Z�g�S�W��ģ<�֨��
cm^Ub3GƲk��k���el~�����=�;����qL��4 ������`�?�u�m��� Vta3�"�m���'�?���l���nr�Q�L���J��
3��^���(ξߖ���I0�E0U����x0d���{�j�Oݨ��^0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U�00U%�0
+0U��0
	*�H��
�*�˝���כ�~�F컰8�+]�\��Tݣc�����N�����p�4�.���xi��>̈���ahq.�\��}��JȂ<���7�	�O/�x�c�;��a�;
v�s唓>�od��r)P��S�'<��;C���<&���3���#D�E����
�~W�-7
��Z��^e5�ΰ�n�Ҏ��`��D���XD�r��8���oMa)d$
�V�e0�<եV]�\�G5"Y9`�w��B�v�n]�ݢ:cɄ�軍�Rh�>�C��gykq�0�������s�Y�|��۽��Pj�_��U�f�^�5�
�ڝ3�������߳:X���S��w�v����Ai���zg��������'քX~s���H�KF
76?h�༑��;��L���Y>͒qW{맂�����pwM�@��;7�~Rd�=��4��lH��q��ume{���`�n1�0�q0�Y�3��k��I�0
	*�H��
0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��
�0�
���L�r!y���$y�Ղ��ҩlNu��5W�lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZas�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.����0��0	+�70#	+�7*�R�dĚ���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+�7L�}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+0	+�7
SubCA0U�0U�0�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��
��U}�*��,g1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ����t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��WITd�s�[D�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�iD~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�M0�50����Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:A935-03E0-D9471%0#UMicrosoft Time-Stamp Service�#
0+#:����`ܐ3�x���*���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��
��?0"20260622130359Z20260623130359Z0t0:
+�Y
1,0*0
��?0-0
0
���06
+�Y
1(0&0
+�Y
�
0� �
0��0
	*�H��
���,������e�q��S
Gg�>|2x{$Z���W;�yq��W���
�ⰰ8�>��g�e��&�F�2�\��,~�y&Ƭ����EG��[}5�+),%�0������~�����+#�=�,�^+_��'d^�;�K!�:�u��e�@�Z�<�]S^��l�%0y�y'��(PRF3��D㜝_��S�.3Ɋ�t"��>iM�ǽ��˹c�-��Ez/P����P���Ξs\��J���Y�830l�U�k	7��[��i�A1�
0�	0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103'��ñ.W-'0
	`�He��J0	*�H��
	1
*�H��
	0/	*�H��
	1" G���\���
Q������>�H�u��	�0��*�H��
	/1��0��0��0�� ��5�R8�J�Dѧj�6}Mwe�u�qq��r0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103'��ñ.W-'0" *��ugI���4��H"U-c�g+g�k����0
	*�H��
����kH{��Q|��>h�07*V�B�K�p]*����!���,���(@D���ɽ�-�c�K�~�R�:�.ĒJ��2T��ר
�I�Jkғ�T���
�2�k��8���d���G�g�"3C�!W��1��Q&'[�ją�_s
�N|!H|������6���,��ѫ9��VÏ�i�ɝxߙ���l�]f� q�OU�˚�ibj���A�U$�E?]
(�ݸc������(�i�	w<EC/�(v�2��؞ůn�*EiF�mE�^`cך��,%��I�%W�JU#b���A�̻薇�@hsQ��"�a�q���1�T^!�&��9�Xۈ��7x�ۉ����}�	�:i��A�;�v���o1�f?���nL֋L�ij2F����o��$��%�	����z��f���E��
����=��"� �f
z��=}Xj6��AǙNf��d�a���
���~�.���6�
�6�vp���!��

Youez - 2016 - github.com/yon3zu
LinuXploit